@orangecheck/sdk 1.17.1 → 1.18.0

package/dist/index.mjs

@@ -68,6 +68,11 @@ function parseIdentities(identitiesStr) {
   }
   return bindings;
 }
+function readBondExtension(value) {
+  if (!/^[0-9]+$/.test(value)) return null;
+  const n = Number(value);
+  return Number.isSafeInteger(n) ? n : null;
+}
 function buildCanonicalMessage({ address, identities }, extensions = {}, options = {}) {
   const nonce = options.nonce ?? randomNonce16BHexLower();
   if (!/^[0-9a-f]{32}$/.test(nonce)) {
@@ -90,6 +95,9 @@ function buildCanonicalMessage({ address, identities }, extensions = {}, options
       continue;
     }
     const key = k.toLowerCase();
+    if (key === "bond" && readBondExtension(String(v)) === null) {
+      throw new Error(`invalid bond: ${String(v)} is not a whole number of sats up to 2^53 - 1`);
+    }
     normExt[key] = String(v);
   }
   const extLines = Object.keys(normExt).sort().map((k) => `${k}: ${normExt[k]}`);
@@ -356,14 +364,15 @@ function parseCanonicalMessage(msg) {
   }
   const network = extensions["network"] || "mainnet";
   const bondStr = extensions["bond"];
-  const bond = bondStr ? parseInt(bondStr, 10) : void 0;
+  const bond = bondStr ? readBondExtension(bondStr) : void 0;
   return {
     core: { address, identities, issued_at },
     expires,
     repeated,
     network,
     extensions,
-    bond: bond !== void 0 && !isNaN(bond) && bond > 0 ? bond : void 0
+    bond: bond !== void 0 && bond !== null && bond > 0 ? bond : void 0,
+    bondMalformed: bond === null
   };
 }
 async function getAddressUtxos(address, network, opts) {
@@ -532,6 +541,16 @@ async function verify(input, opts = {}) {
         identities: parsed.core.identities
       };
     }
+    if (parsed.bondMalformed) {
+      codes.push("bond_malformed");
+      return {
+        ok: false,
+        codes,
+        network,
+        attestation_id,
+        identities: parsed.core.identities
+      };
+    }
     try {
       const utxos = await getAddressUtxos(input.addr, network, {
         esploraMainnetBase: opts.esploraMainnetBase,
@@ -2316,6 +2335,11 @@ var STATUS_META = {
     detail: "The confirmed balance is less than the declared bond amount. The bond extension requires the address to hold at least the specified amount in confirmed UTXOs.",
     severity: "error"
   },
+  bond_malformed: {
+    label: "Bond amount not readable",
+    detail: "The signed bond line is not a whole number of sats written in plain digits, so the attestation does not say how much it bonds.",
+    severity: "error"
+  },
   aud_mismatch: {
     label: "Audience mismatch",
     detail: "The message was signed for a different audience than expected. This may be intentional or indicate the signature is being used in the wrong context.",
@@ -2358,6 +2382,6 @@ var STATUS_META = {
   }
 };
 
-export { BOND_DAYS_FLOORS, BOND_MAX_WINDOW_SECONDS, BOND_MIN_CONFIRMATIONS, BOND_SATS_FLOORS, DEFAULT_RELAYS, FANOUT_DEADLINE_MS, STATUS_META, bondFloors, bondId, bondNullifier, buildBondMessage, buildCanonicalMessage, check, checkBondCoin, computeAllScores, computeScore, createAttestation, createAttestationEnvelope, createAttestationEvent, discoverAttestations, esploraSource, extractAttestationIdFromUrl, formatIdentities, formatIdentitiesForDisplay, generateAttestationId, generateGistTemplate, generateTweetText, generateWellKnownContent, getAttestationsForAddress, getAttestationsForIdentity, getDnsVerificationInstructions, getGistCreationUrl, getGitHubVerificationInstructions, getManualVerificationInstructions, getNip07Info, getNostrPublicKey, getNostrVerificationInstructions, getTweetUrl, getTwitterComposeUrl, getTwitterVerificationInstructions, getVerificationInstructions, getVerificationSummary, getVerificationUrl, getWellKnownUrl, isDnsIdentityVerified, isGitHubIdentityVerified, isNip07Available, isNostrIdentityVerified, isValidDomain, isValidTweetUrl, issueBondMessage, issueChallenge, nostrIdentifierForms, nostrPubkeyToHex, parseAttestationFromEvent, parseBondMessage, parseIdentities, publishAttestation, publishToRelays, queryByAddress, queryByAttestationId, queryByIdentity, queryRecent, requiresManualVerification, signNostrEvent, signatureIsValid, signedEnvelope, supportsAutomaticVerification, verify, verifyAllIdentities, verifyAttestationById, verifyBond, verifyBondSignature, verifyChallenge, verifyDnsIdentity, verifyGitHubIdentity, verifyIdentity, verifyNostrIdentity, verifyTwitterIdentity };
+export { BOND_DAYS_FLOORS, BOND_MAX_WINDOW_SECONDS, BOND_MIN_CONFIRMATIONS, BOND_SATS_FLOORS, DEFAULT_RELAYS, FANOUT_DEADLINE_MS, STATUS_META, bondFloors, bondId, bondNullifier, buildBondMessage, buildCanonicalMessage, check, checkBondCoin, computeAllScores, computeScore, createAttestation, createAttestationEnvelope, createAttestationEvent, discoverAttestations, esploraSource, extractAttestationIdFromUrl, formatIdentities, formatIdentitiesForDisplay, generateAttestationId, generateGistTemplate, generateTweetText, generateWellKnownContent, getAttestationsForAddress, getAttestationsForIdentity, getDnsVerificationInstructions, getGistCreationUrl, getGitHubVerificationInstructions, getManualVerificationInstructions, getNip07Info, getNostrPublicKey, getNostrVerificationInstructions, getTweetUrl, getTwitterComposeUrl, getTwitterVerificationInstructions, getVerificationInstructions, getVerificationSummary, getVerificationUrl, getWellKnownUrl, isDnsIdentityVerified, isGitHubIdentityVerified, isNip07Available, isNostrIdentityVerified, isValidDomain, isValidTweetUrl, issueBondMessage, issueChallenge, nostrIdentifierForms, nostrPubkeyToHex, parseAttestationFromEvent, parseBondMessage, parseIdentities, publishAttestation, publishToRelays, queryByAddress, queryByAttestationId, queryByIdentity, queryRecent, readBondExtension, requiresManualVerification, signNostrEvent, signatureIsValid, signedEnvelope, supportsAutomaticVerification, verify, verifyAllIdentities, verifyAttestationById, verifyBond, verifyBondSignature, verifyChallenge, verifyDnsIdentity, verifyGitHubIdentity, verifyIdentity, verifyNostrIdentity, verifyTwitterIdentity };
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map